Plain-English guide
Your Customers' Car Data Is Being Sold
This week's headlines about car manufacturers selling driver data to third parties have made a lot of people stop and think about what's being collected about them – and by whom. Your customers are asking that question about every business they deal with, including yours. Getting your data practices right isn't just a legal obligation; it's a genuine competitive advantage.
By Matt Rooney · 15/09/2026 · T19 Digital · 3 min read
The short version
- Audit what customer data you collect before someone else questions it for you.
- Transparent data practices build trust that cheap marketing rarely achieves.
- T19 AI consultancy from £4,200 helps you handle data responsibly and compliantly.
Why Customer Trust Around Data Is Shifting
When a story breaks about data being gathered and sold without people fully realising it, it raises a general wariness. Customers start looking more carefully at cookie banners, privacy notices, and the forms they fill in on small business websites – not just the big platforms. That shift is already happening, and it will affect how willing people are to hand over a phone number or email address.
The good news is that small businesses are actually well placed to respond. You're not a faceless corporation. You can make genuine promises and keep them. But first, you need to know exactly what data you're collecting, where it goes, what you do with it, and how long you keep it. If you can't answer those questions confidently, your customers certainly can't trust you with the answers either.
What a Data Audit Actually Involves
A data audit sounds heavyweight, but for most small businesses it's a structured, practical exercise. You're mapping out every point where customer information enters your business: contact forms, booking systems, email marketing lists, payment processors, analytics tools, and any third-party software you use. For each one, you note what's collected, why, who can access it, and whether the data is shared onward.
Once you have that map, gaps become obvious. Maybe your contact form collects fields you don't actually need. Maybe a plugin on your website is sending data somewhere you've never looked at. Maybe your privacy policy was written three years ago and no longer reflects what you do. None of this is unusual – most small businesses find at least one thing worth tightening up. The important part is doing the work before a customer or regulator asks the question.
How to Show Customers You Take This Seriously
Transparency doesn't mean publishing a 4,000-word legal document and hoping for the best. It means writing a privacy notice in plain English that tells people, simply, what you collect and why. It means having a contact form that only asks for what you genuinely need. It means not pre-ticking marketing consent boxes. These things take an afternoon to fix and they're noticed, particularly by customers who've just been reading about car data being sold to insurers.
Tools can help here too. Our Lead Capture AI product, for example, handles enquiries through T19's own contact form around the clock – and it's built to handle only the data needed to answer a question, nothing more. If you're using AI tools in your business, the same principle applies: understand what data those tools process, and be ready to tell customers honestly. That honesty, more than any marketing claim, is what builds the kind of trust that keeps people coming back.
Where T19 Can Help
Our AI consultancy work, from £4,200, includes straightforward advice on how AI tools interact with customer data, what questions to ask your software suppliers, and how to build systems that are compliant without being clunky. We're not a law firm, and we'll tell you when you need a solicitor, but we can help you understand the technical side clearly and make practical improvements quickly.
We also build the systems themselves – websites from £1,500, booking systems from £3,300, and bespoke business systems from £8,000 – all with data minimisation built in from the start rather than bolted on afterwards. If your current site or system was built without much thought given to data, our website rescue service from £900 is a good starting point. The goal is simple: give your customers a reason to trust you with their details, and give yourself confidence that you're handling those details properly.
Questions we get on this
Do I need a lawyer to audit my data practices?
Not always. A technical audit of what your systems collect is a good first step. A solicitor is worth involving if you handle sensitive data or are unsure about your legal basis for processing under UK GDPR.
Does T19's AI consultancy cover GDPR compliance?
We cover the technical and practical side – what data your tools collect and how to reduce risk. For formal legal compliance sign-off, we'll point you to a qualified solicitor. Starting price is £4,200.
What is data minimisation and why does it matter?
Data minimisation means only collecting information you actually need. It reduces your risk if there's a breach, simplifies compliance, and signals to customers that you respect their privacy.
Three things like this, once a month
What actually changed for small businesses in tech, what to do about it, and the guides we publish. No pitch, and you can leave with one click.
Sixty seconds gets you a number
The estimator prices your version of this without asking for an email.